Feed live

Drupal vulnerabilities - every known CVE across core and contributed modules

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

Drupal sees heavy use in government and enterprise deployments, where contributed modules are the most common source of new CVEs. Indexed and scored as they're disclosed.

Total CVEs tracked

357,895

All time

Critical · Active

12,864

CVSS ≥ 9.0

New · 14 days

920

Newly disclosed

Feed last synced

47 mins ago

Data freshness

Showing 61–67 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-31250	—	—	Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005	Apr 26, 2023 3y ago
CVE-2020-13668	—	—	Access bypass in Drupal Core 8/9	Feb 11, 2022 4y ago
CVE-2019-6342	—	—	Drupal core - Critical - Access bypass - SA-CORE-2019-008	May 28, 2020 6y ago
CVE-2019-6341	—	—	Drupal core - Moderately critical - Cross Site Scripting - SA-CORE-2019-004	Mar 26, 2019 7y ago
CVE-2019-6340	—	—	Drupal core - Highly critical - Remote Code Execution	Feb 21, 2019 7y ago
CVE-2017-6923	—	—	Access bypass in Drupal 8 views	Jan 22, 2019 7y ago
CVE-2018-7602	—	—	Drupal core - Highly critical - Remote Code Execution - SA-CORE-2018-004	Jul 19, 2018 8y ago